PROJECT: AI-ASSISTED CRIME IN SOUTH AFRICA
- 2 days ago
- 8 min read
PLEASE SHARE THIS PUBLIC DOCUMENT
WHEN TECHNOLOGY WEAPONISES TRUST
AN SSS PUBLIC WARNING
Artificial intelligence is no longer simply a technological development. It is becoming another tool available to criminals.
In South Africa, fraudsters already use WhatsApp, social media, email, telephone calls and impersonation to deceive victims. AI now provides additional capabilities that can make these communications more convincing.
The threat should not be exaggerated, but neither should it be ignored.
The most important point is this:
AI does not have to be perfect to be dangerous.
It only has to be convincing enough to make a victim act.
THE SOUTH AFRICAN REALITY:
South African banking-risk authorities have warned that criminals are increasingly using AI to produce more convincing scams, including AI-generated phishing emails and WhatsApp messages, as well as voice-cloned deepfakes.
SABRIC reported that digital banking fraud remained a major channel in 2024 and noted that the underlying attacks frequently relied on social engineering and human error.
This is significant because it demonstrates that the criminal threat is not necessarily a sophisticated attack against a computer system.
In many cases, the criminal simply needs to deceive a person.
The technology is merely the weapon.
WHATSAPP IMPERSONATION:
WhatsApp has become an important communication platform in South Africa and is also being exploited by criminals.
SAPS has warned about fraudulent WhatsApp messages and calls in which criminals impersonate police officials, use legitimate names and institutional information, and pressure victims to provide personal information or make payments.
In another South African case, a suspect allegedly impersonated the National Head of the Hawks through WhatsApp, using his name, photograph and personal information to convince a victim that he was communicating with the real official. The victim subsequently paid more than R100,000.
This demonstrates an important principle: An official-looking profile is not proof of identity.
A criminal does not need to hack an institution if the criminal can convince the victim that the criminal represents that institution.
AI VOICE CLONING: "BUT IT SOUNDS JUST LIKE HIM"
One of the most disturbing developments is the potential use of cloned voices.
A criminal may attempt to imitate the voice of a child, spouse, parent, business associate or other trusted person and create a false emergency.
The message may be simple: "I am in trouble.""I have been arrested.""I have lost my phone.""Please send money immediately."
The danger is the emotional reaction.
A distressed family member may hear a familiar voice and immediately respond without verification.
The correct response is to end the communication and independently contact the alleged person on a known number.
A familiar voice must no longer be treated as absolute proof of identity.
FAKE BANKING AND FINANCIAL COMMUNICATIONS:
South Africans should also be particularly cautious when receiving communications allegedly from banks, SARS, police officials or other institutions.
SAPS already warns that criminals use phishing, vishing and smishing to obtain sensitive information and that banks will not ask customers to provide confidential information such as passwords or PINs over the telephone.
SARS has also warned South Africans about fraudulent communications and stated in July 2026 that scammers were using AI to produce professional-looking email templates that are harder to recognise as fraudulent.
The message may therefore look professional.
The language may be perfect.
The branding may appear genuine.
The information may even contain details about the intended victim.
None of these factors proves that the communication is legitimate.
THE "YOUR CHILD IS IN TROUBLE" SCAM:
Criminals have long exploited fear involving children and family members.
AI can potentially strengthen this method by making impersonation more convincing.
A criminal may claim that a son, daughter, spouse or parent has been involved in an accident, arrested, kidnapped or placed in danger.
The victim is then pressured to transfer money immediately.
The objective is to prevent rational verification.
The SSS recommendation is simple: STOP THE CONVERSATION. CALL THE PERSON DIRECTLY. VERIFY THE STORY.
Do not use the number provided by the caller.
Use a number already stored in the phone or obtained independently.
ROMANCE SCAMS AND DIGITAL RELATIONSHIPS:
AI also creates additional risks in romance scams.
A criminal may operate under a false identity and use photographs, fabricated personal histories and increasingly sophisticated digital content to maintain a relationship with a victim.
The fundamental crime, however, remains social engineering.
The criminal establishes trust, develops an emotional relationship and eventually introduces a financial crisis, investment opportunity, medical emergency, travel problem or other reason for requesting money.
The victim is not necessarily deceived because the technology is sophisticated.
The victim is deceived because the relationship feels real.
KIDNAPPING AND EXTORTION CLAIMS:
False kidnapping and extortion claims can be particularly dangerous because they exploit immediate fear.
A criminal may claim that a relative has been kidnapped and demand urgent payment.
The victim may be given a short deadline and instructed not to contact police or other family members.
Any such communication must be treated as potentially fraudulent until independently verified.
SAPS advises victims of extortion to avoid impulsive reactions, preserve communications and demands, and report suspected extortion to law enforcement without delay.
Fear is precisely what the criminal is attempting to create.
The victim must therefore slow the situation down rather than allow the criminal to dictate the response.
FAKE POLICE OFFICIALS:
South Africans should be particularly cautious when somebody claiming to be a police official demands money.
SAPS has repeatedly warned about criminals impersonating police officials and demanding payment.
A legitimate name, SAPS logo, uniform photograph or official-looking document does not establish authenticity.
If a person claims to be a police official, the victim should independently verify the identity and contact the relevant police station.
SAPS has specifically warned the public about fraudulent communications using its details and stated that members should not provide personal information or pay money in response to such demands.
FAKE NEWS CAN BECOME A SECURITY THREAT:
AI-generated misinformation is not limited to financial crime.
False photographs, manipulated videos, fabricated statements and synthetic voice recordings can create panic and damage reputations.
The South African Government has recently warned that misinformation, disinformation and malinformation can spread rapidly through social media and messaging platforms, particularly when accompanied by manipulated images, edited videos and deepfakes.
This creates a serious investigative problem.
A message can be widely circulated before anyone establishes whether it is true.
Virality is not verification.
The number of people sharing a claim does not make the claim factual.
THE SSS VERIFICATION RULE:
The public should adopt a simple five-step rule:
1. STOP:
Do not react immediately.
2. QUESTION:
Ask whether the request is unusual, urgent or financially threatening.
3. VERIFY:
Contact the alleged person or institution independently.
4. PRESERVE:
Keep screenshots, messages, telephone numbers, email addresses, recordings and payment details.
5. REPORT:
Report suspected criminal activity to the appropriate authorities and financial institution without delay.
SAPS similarly advises the public to think before clicking, verify the source of suspicious communications and report suspected cybercrime or fraud.
NEVER GIVE AN OTP:
One-time passwords and banking authentication information must be treated as confidential.
If an unexpected OTP arrives, the recipient should not provide it to a caller claiming to be from a bank or another institution.
SAPS specifically warns that an unsolicited OTP may indicate an attempted fraudulent transaction and advises contacting the bank immediately.
The same principle applies to passwords, PINs, banking credentials and identity information.
No legitimate emergency requires a victim to abandon basic security procedures.
PROTECT THE ELDERLY:
Families should have these conversations with elderly relatives before an incident occurs.
They should know:
Never transfer money because of an unexpected emergency call.
Never provide an OTP or banking PIN.
Never trust a WhatsApp profile merely because the photograph is familiar.
Never assume that a familiar voice proves identity.
Never allow a caller to prevent independent verification.
Contact a family member directly when something appears suspicious.
A simple family verification procedure can prevent a serious financial loss.
THE CRIMINAL DOES NOT NEED PERFECT AI:
This is perhaps the most important point.
Criminals do not need flawless deepfakes.
They need credible deception.
If a cloned voice is only convincing for thirty seconds, that may be sufficient.
If an AI-generated email looks professional enough to avoid immediate suspicion, that may be sufficient.
If a fake WhatsApp profile appears genuine long enough for a victim to disclose information, that may be sufficient.
The objective is not technological perfection.
The objective is human compliance.
COGNITIVE BURGLAR BARS:
Physical security professionals understand that no security measure is absolute.
Burglar bars do not guarantee that a property cannot be entered. They create an additional barrier, delay an intruder and increase the opportunity for detection.
The same principle applies to digital deception.
Verification is the cognitive burglar bar.
It creates a barrier between the criminal's claim and the victim's response.
It creates time for emotion to settle and reason to take over.
It creates an opportunity to discover the deception before money, information or access is surrendered.
THE SSS POSITION:
AI should neither be treated as science fiction nor as an explanation for every modern fraud.
The evidence shows that criminals are beginning to use AI-assisted techniques, while traditional social engineering remains fundamental to many scams. SABRIC's reporting illustrates this combination precisely: emerging AI capabilities being used alongside established methods of manipulating victims.
The public therefore does not need to become an AI expert.
It needs to become harder to deceive.
Stop. Think. Verify. Preserve the evidence. Report the crime.
Technology will continue to evolve.
Criminal methodology will evolve with it.
Human vigilance must evolve faster.
This article reflects Mr. Bolhuis's personal and professional observations arising from investigative work.
It is not presented as a technical or academic assessment of artificial intelligence.
Technical questions concerning AI capabilities, development and long-term risks should be evaluated by appropriately qualified specialists.
RELEVANT NEWS ARTICLES:
Specialised Security Services invites the public to the Mike Bolhuis Daily Projects WhatsApp Channel.
This channel is important in delivering insights into the latest crime trends, awareness, warnings and the exposure of criminals.
How to Join the WhatsApp Channel:
1. Make sure you have the latest version of WhatsApp on your device.
2. Click on the link below to join the Mike Bolhuis Daily Projects WhatsApp Channel:
3. Follow the prompts to join the channel.
4. Make sure you click on "Follow", then click on the "bell"-icon (🔔)
CONTACT MR MIKE BOLHUIS FOR SAFETY AND SECURITY MEASURES, PROTECTION, OR AN INVESTIGATION IF NEEDED.
ALL INFORMATION RECEIVED WILL BE TREATED IN THE STRICTEST CONFIDENTIALITY AND EVERY IDENTITY WILL BE PROTECTED.
Regards,
Mike Bolhuis
Specialist Investigators into
Serious Violent, Serious Economic Crimes & Serious Cybercrimes
PSIRA Reg. 1590364/421949
Mobile: +27 82 447 6116
E-mail: mike@mikebolhuis.co.za
Fax: 086 585 4924
Follow us on Facebook to view our projects -
EXTREMELY IMPORTANT: All potential clients need to be aware that owing to the nature of our work as specialist investigators there are people who have been caught on the wrong side of the law - who are trying to discredit me - Mike Bolhuis and my organisation Specialised Security Services - to get themselves off the hook. This retaliation happens on social media and creates doubt about our integrity and ability. Doubt created on social media platforms is both unwarranted and untrue. We strongly recommend that you make up your minds concerning me and our organisation only after considering all the factual information - to the exclusion of hearsay and assumptions. Furthermore, you are welcome to address your concerns directly with me should you still be unsatisfied with your conclusions. While the internet provides a lot of valuable information, it is also a platform that distributes a lot of false information. The distribution of false information, fake news, slander and hate speech constitutes a crime that can be prosecuted by law. Your own research discretion and discernment are imperative when choosing what and what not to believe.
STANDARD RULES APPLY: Upon appointment, we require a formal mandate with detailed instructions. Please take note that should you not make use of our services – you may not under any circumstance use my name or the name of my organisation as a means to achieve whatever end.
POPI ACT 4 of 2013 South Africa: Mike Bolhuis' "Specialised Security Services" falls under Section 6 of the act. Read more here: https://mikebh.link/fntdpv
SSS TASK TEAM:
Copyright © 2015- PRESENT | Mike Bolhuis Specialised Security Services | All rights reserved.
Our mailing address is:
Mike Bolhuis Specialised Security Services
PO Box 15075 Lynn East
Pretoria, Gauteng 0039
South Africa
Add us to your address book
THIS PUBLIC DOCUMENT WAS INTENDED TO BE SHARED, PLEASE DO SO.
